[dns-operations] TLDmon QTYPE warning

Thu Dec 8 21:01:01 UTC 2016

In message <5a356a9c-ef24-56ce-c0eb-dabba1fa0391 at sidn.nl>, "Marco Davids (SIDN)" writes:
> 
> Hi Roy,
> 
> On 08/12/2016 12:22, Roy Arends wrote:
> 
> > It should be a warning, since this is slightly limited the deployment
> > of the URI QTYPE in your namespace.
> 
> Good point! Thank you.
> 
> I was under the assumption that the NOTIMPL was only returned for
> 
> dig -t TYPE(UNKNONW) nl @ns2.dns.nl
> 
> But is it also returned for
> 
> dig -t TYPE(UNKNOWN) example.nl @ns2.dns.nl
> 
> We have an issue here that we will have to look into.

Don't worry you are not alone.  K.ROOT-SERVERS.NET and L.ROOT-SERVERS.NET
also don't handle URI like this.

NOTIMPL only makes sense for meta types with QUERY and we have a
reserved range for meta types.  Otherwise it should be NOERROR or
NXDOMAIN.

If a server for a zone doesn't implement a type that is in a zone
it should return SERVFAIL on loading the zone for all of the namespace
(RFC 1034).  If it successfully loads the zone then NOERROR or
NXDOMAIN are the results that should be returned depending upon
whether the name exists in the zone or not (RFC 1034).

Mark

. @198.41.0.4 (a.root-servers.net.): all ok
. @2001:503:ba3e::2:30 (a.root-servers.net.): all ok
. @192.228.79.201 (b.root-servers.net.): all ok
. @2001:500:84::b (b.root-servers.net.): all ok
. @192.33.4.12 (c.root-servers.net.): all ok
. @2001:500:2::c (c.root-servers.net.): all ok
. @199.7.91.13 (d.root-servers.net.): all ok
. @2001:500:2d::d (d.root-servers.net.): all ok
. @192.203.230.10 (e.root-servers.net.): all ok
. @2001:500:a8::e (e.root-servers.net.): all ok
. @192.5.5.241 (f.root-servers.net.): all ok
. @2001:500:2f::f (f.root-servers.net.): all ok
. @192.112.36.4 (g.root-servers.net.): all ok
. @2001:500:12::d0d (g.root-servers.net.): OPENPGPKEY=timeout
. @198.97.190.53 (h.root-servers.net.): all ok
. @2001:500:1::53 (h.root-servers.net.): all ok
. @192.36.148.17 (i.root-servers.net.): all ok
. @2001:7fe::53 (i.root-servers.net.): all ok
. @192.58.128.30 (j.root-servers.net.): all ok
. @2001:503:c27::2:30 (j.root-servers.net.): all ok
. @193.0.14.129 (k.root-servers.net.): URI=notimp
. @2001:7fd::1 (k.root-servers.net.): URI=notimp
. @199.7.83.42 (l.root-servers.net.): URI=notimp
. @2001:500:9f::42 (l.root-servers.net.): URI=notimp
. @2001:dc3::35 (m.root-servers.net.): all ok
. @202.12.27.33 (m.root-servers.net.): all ok

> Not just for the URI-type BTW, I see quite a few others as well. Some of
> which are returning FORMERR (like TYPE1275).
> 
> Internally we refer to this matter as the 'KNOTIMPL'-issue ;-)
> 
> --
> Marco
> 
> 
> --------------ms070608020100010502010306
> Content-Type: application/pkcs7-signature; name="smime.p7s"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="smime.p7s"
> Content-Description: S/MIME Cryptographic Signature
> 
> MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
> CucwggT9MIID5aADAgECAhBEhHBK+ywnjF/Ez19KUgEnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ
> BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD
> ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll
> bnQgQ0EwHhcNMTYwNTEwMjAyMzI5WhcNMTcwNTEwMjAyMzI5WjBEMR0wGwYDVQQDDBRtYXJj
> by5kYXZpZHNAc2lkbi5ubDEjMCEGCSqGSIb3DQEJARYUbWFyY28uZGF2aWRzQHNpZG4ubmww
> ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2yA2kvqV+Ul/x++/XWCzYEtrZkfM
> TQIRP1jlNKqhejnMKIo8NrGBvvsa5XaJPG8lHH+l/iKL9CSR0N0rcW7i+uKlFW1JWKm5D7bj
> l4YBb3CttNxbrbpIYqUflbFwGvjxfF2dcimDdTFtsjUMdkEezjJLZQ0rtgWGW1q1dibNZtPb
> zsCXrbYLQXxF8gbTRq4RkBzuaLxv+U1gd7sMLkmBpEgfYAf7BpA3dw2XgDUXmBCotzZnAk1k
> ldysz2mRiW2m3+x2nHOGiZwb45E8ERdL4fzDIljH1ICtNVD6zBjyfrSJ0J3hAUTXkYIVWDbg
> FEosWG0kH3y+ix8aPKqcKpT9AgMBAAGjggG4MIIBtDAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0l
> BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFJQEzlf9K5AY
> a9hELugjjzxPCunxMB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUF
> BwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUF
> BzAChi1odHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYD
> VR0fBDEwLzAtoCugKYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3Js
> MB8GA1UdEQQYMBaBFG1hcmNvLmRhdmlkc0BzaWRuLm5sMCMGA1UdEgQcMBqGGGh0dHA6Ly93
> d3cuc3RhcnRzc2wuY29tLzBHBgNVHSAEQDA+MDwGCysGAQQBgbU3AQIFMC0wKwYIKwYBBQUH
> AgEWH2h0dHBzOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kwDQYJKoZIhvcNAQELBQADggEB
> AFmlkci6l6dzl5KDFniVok2aS4zYq7E1Eri7COGQeAmYLlZxy4L0XuzbQRSjMCElecnEMIUl
> nB9y+7S3f4TePAFuEn7CkTWbEM1Ie62EasNkstQB81DiTJKr9sYC11Q6BuWc0GoiZK8iEv39
> 31nJ0One0autcTSn8nsRLoXfwbOFHYhWpliS4Ner6YNfgOt2Afpb4jVkwuJ93SpIeC409Jma
> AhcP5j4i8mXKIsemIOAJYuAuCtWawEdIepgyQxFmrTo85Ok14gSO04hn0r0NflG/MQAhmQDY
> eOllADQbWE0PLNrDmhW23YZ7kwnFe+TmtdT9CSbT6Dmfw2oLCBgegyYwggXiMIIDyqADAgEC
> AhBrp4p9CteI1lEK+Vnk57ThMA0GCSqGSIb3DQEBCwUAMH0xCzAJBgNVBAYTAklMMRYwFAYD
> VQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0
> ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
> Fw0xNTEyMTYwMTAwMDVaFw0zMDEyMTYwMTAwMDVaMHUxCzAJBgNVBAYTAklMMRYwFAYDVQQK
> Ew1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhv
> cml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGllbnQgQ0EwggEiMA0GCSqGSIb3
> DQEBAQUAA4IBDwAwggEKAoIBAQC9fdr3w6J9g/Zbgv3bW1+uHht1wLUZr5gkrLtXedg17Ake
> fMyUGwrQdvwObhajcVmnKVxhrUwkZPXRAwZZosRHfEIi5FH7x6SV/8Sp5lZEuiMnvMFG2MzL
> A84J6Ws5T4NfXZ0qn4TPgnr3X2vPVS51M7Ua9nIJgn8jvTra4eyyQzxvuA/GZwKg7VQfDCmC
> S+kICslYYWgXOMt2xlsSslxLce0CGWRsT8EpMyt1iDflSjXZIsE7m1uTyHaKZspMLyIyz6my
> Su8j8BWWHpChNNeTrFuhVfrOAyDPFJVUvKZCLKBhibTLloyy+LatoWELrjdI4a8StZY8+dIR
> 9t4APXGzAgMBAAGjggFkMIIBYDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUH
> AwIGCCsGAQUFBwMEMBIGA1UdEwEB/wQIMAYBAf8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0
> cDovL2NybC5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMGYGCCsGAQUFBwEBBFowWDAkBggrBgEF
> BQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDAGCCsGAQUFBzAChiRodHRwOi8vYWlh
> LnN0YXJ0c3NsLmNvbS9jZXJ0cy9jYS5jcnQwHQYDVR0OBBYEFCSBbDlhvkkPj7cbRivJKLUn
> SG1oMB8GA1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMD8GA1UdIAQ4MDYwNAYEVR0g
> ADAsMCoGCCsGAQUFBwIBFh5odHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kwDQYJKoZI
> hvcNAQELBQADggIBAIvj94fsAYuErQ8BAluc4SMnIwS9NPBwAm5SH9uh2NCXTq7im61g7F1L
> IiNI/+wq37fUuaMbz4g7VarKQTgf8ubs0p7NZWcIe7Bvem2AWaXBsxsaRTYw5kG3DN8pd1hS
> EUuFoTa7DmNeFe8tiK1BrL3rbA/m48jp4AiFXgvxprJrW7izsyetOrRHPbkW4Y07v29MdhaP
> v3u1JELyszXqOzjIYo4sWlC8iDQXwgSW/ntvWy2n4LuiaozlCfXl149tKeqvwlvrla2Yklue
> /quWp9j9ou4T/OY0CXMuY+B8wNK0ohd2D4ShgFlMSjzAFRoHGKF81snTr2d1A7Ew02oF6UQy
> CkC2aNNsK5cWOojBar5c7HplX9aHYUCZouxIeU28SONJAxnATgR4cJ2jrpmYSz/kliUJ46S6
> UpVDo/ebn9c6PaM/XtDYCCaM/7XX6wc3s++sbQ7CtCn1Ax7df6ufQbwyO0V+oFa9H0KAsjHM
> zcwk3EV2B2NLatidKE/m7G+rB9m+FlVgIiSp0mGlg43QO9Kh1+JqvTCIzv2bJJkmPMLQJNuK
> KwHNL8F4GGp6jbAV+WL+LDeGfVcq8DHS3LrD+xyYEXQBiqZEdiPVOMxLDSUCXsDO0uCWpaNQ
> 8j6y6S9p0xE/Ga0peVLadVHhqf9nXqKaxnr358VgfrxzUIrvOaOjMYIDzDCCA8gCAQEwgYkw
> dTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0
> Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAx
> IENsaWVudCBDQQIQRIRwSvssJ4xfxM9fSlIBJzANBglghkgBZQMEAgEFAKCCAhMwGAYJKoZI
> hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYxMjA4MTE0MzQxWjAvBgkq
> hkiG9w0BCQQxIgQgdmOvEUKViXzaNgYiKV7YAtDkA8R2VVtw96YLAc/DlBswbAYJKoZIhvcN
> AQkPMV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3
> DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBmgYJKwYB
> BAGCNxAEMYGMMIGJMHUxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkw
> JwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3Rh
> cnRDb20gQ2xhc3MgMSBDbGllbnQgQ0ECEESEcEr7LCeMX8TPX0pSAScwgZwGCyqGSIb3DQEJ
> EAILMYGMoIGJMHUxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYD
> VQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRD
> b20gQ2xhc3MgMSBDbGllbnQgQ0ECEESEcEr7LCeMX8TPX0pSAScwDQYJKoZIhvcNAQEBBQAE
> ggEALv9BDAIk9/JHYLz4fATr0Mbg5axupeDMpk3PJObWgYnNJv/N8O/LYhD/dmlQ2gLThT9T
> ctGeXq8ME5NO5j6IpbQr9nyWzRQ8mPaKVkImCCIw9WL8StCm8WMKcxjJYrE6C26MQVxPwzf+
> YPZ6Yk9kHolpGHXWxkupq77IQmkeuAR3xEtWvqqs9R0/Tkmzl9Nklx+a8OJ4K+aYJ0oFpQoP
> h4mdnwK22i5F3xIm12acqvVumPtlloJ7IcLDI/oLJwoN6qDN+02iK3WRM73J4VFp7jrVrP1f
> g1NY9D+4kX+rjTlC4nSE4iumZR9dDI/RAYwpmawTWv2+Om7CmKlW3Bc2SwAAAAAAAA==
> --------------ms070608020100010502010306--
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org